Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Recent content by wholmer

  1. wholmer

    Subnetted PIX network can't talk.

    Its working. I had to change PC2s translation to static. Thanks for pointing me in the right direction!
  2. wholmer

    Subnetted PIX network can't talk.

    The PC1 is now on the DMZ and traslated to the outside. It can see PC2 and PC2 can see PC1. PC1 can get to the internet but PC2 can not get to the internet.
  3. wholmer

    Subnetted PIX network can't talk.

    LloydSev is right. It dawned on me when I drew it out that I need to put PC1 on the dmz and translate to the outside. I have them doing that now. When your not on site its hard to see the packets through the wires.
  4. wholmer

    Subnetted PIX network can't talk.

    Thats right. We don't have any outside access when the default gateway is set to the respective PIX interfaces. PC1 on the outside interface can not get out with the default gateway set for the pix outside interface. PC2 on the inside network can not get out with the default gateway set for the...
  5. wholmer

    Subnetted PIX network can't talk.

    Yes forward and reverse dns is working, we can ping by name or ip. Both pcs in the inside and outside subnets are dns servers. nslookup works on both. Both are pointing to their respective PIX interfaces as the default gateways. I have not tried the PIX itself pinging out. If the PCs set the...
  6. wholmer

    Subnetted PIX network can't talk.

    dopehead summed it up right. The plan does not work. Now I reset the network with internal ips on the inside 172.16.5.1 and the DMZ with 192.168.2.1 and the outside is the regesterd ips. I also upgraded to ver 6.3(4)and I am nating with the outside devided into 2 pools. The inside can see the...
  7. wholmer

    Subnetted PIX network can't talk.

    I just talked to a CISCO rep and he said ...... Not to change the outside router to .192 because then it would only send through the 1st subnet. Then I would have to add statics for the other subnets. So I should leave the router at 255.255.255.0 The config is right for permitting all computers...
  8. wholmer

    Subnetted PIX network can't talk.

    By the way it is not using nat.
  9. wholmer

    Subnetted PIX network can't talk.

    Nope, no vlans. The router has 192.168.1.1/255.255.255.0 (not real IP) and the computers using 192.168.1.70 or .11 and mask 198.120.42.192 on both computers.
  10. wholmer

    Subnetted PIX network can't talk.

    Correction, The DNS on computer 1 is .11
  11. wholmer

    Subnetted PIX network can't talk.

    I have a class C network with a single outside CISCO 2600 router with inside interface 192.168.1.1 255.255.255.0 Not real IP. I added a PIX 515 with the network subnetted .192 on each interface. Outside 192.168.1.2 .255.255.255.192 Inside 192.168.1.65 .255.255.255.192 DMZ...
  12. wholmer

    Is a Split Tunnel needed with PIX to PIX VPN or not?

    Thank you lgarner for clearing this up for me.
  13. wholmer

    Is a Split Tunnel needed with PIX to PIX VPN or not?

    Right now it looks like I have everything going through the VPN to the Main_Office PIX. Of course in the lab the remote setup could not get to the internet anyway. access-list inside_outbound_nat0_acl permit ip any any access-list outside_cryptomap_20 permit ip any any nat (inside) 0...
  14. wholmer

    Is a Split Tunnel needed with PIX to PIX VPN or not?

    Thanks for clearing that up. What do you think of the security issues involved?
  15. wholmer

    Is a Split Tunnel needed with PIX to PIX VPN or not?

    Do you have an example for HTTP and FTP traffic?

Part and Inventory Search

Back
Top